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1 

«Tt:\ #«/B#fc*ft«x«fli*4& (id) * s #ia 

•cbn, M7— ^rt^mstta 4: isiwp^. *a« 
tirj; 9*Uffl«F#r^=jy x^u:#^s»W¥:£#*ft 

l ffi 2 ] aim * y h !7 - * *3 J: tf* O U ffl # 

ftRT-e, #*Uffl#fc:*;ft^*bflJJfl#* (ID) 

tp>n, hy-^rti^i$n§ trai^ic, *a» 

CO I D £ $ tT/T V ^ ^V N T ^ tfeSE 

(B ^ S ffi *»tE S: fT 4 5 - i: «: »» i: i" * ft #BK/ 
ttRT-C, #*UJB#fc**i^*b*]Jfl#* (ID) 

asg#ftf&IiE-t~ ZtztbtDy*— ? S4>jfiSti¥*BliE-t- 

g jfr(D%iwi ( I D) H!yH7^i:*lfc8, ^ 
y — ^ < b$iJffl#Pfl-e#< t fc 3 mcoaM ftfTft 5 r. t ^ 

[§fjfcri4] iiff ^ y h y-^:£ itf-?r^*Jffl#«- 

*a**a«»t#*s;4r*a"t"S»«^^*.&nrv^5 
jrrtt?, #fijffl#^-tn-pn*Uffl#* (id) mm 



#§fl^5- 3 4 4 1 1 7 

2 

CO I D < ^^'lt#^l ^ $^^TV^S^^CjoV^T > BEE 

co^M (ID) by — 9 K*Lfc», *s/bt7 — 

* i:5pJffl#M"C*< t fc 31U<7)aff ftfi 1 ^? ^k\z.£. 
5, BBE^TftitWff-^afS (30fci6cOBt-^«|cDga{f ft 
*T**Swfc*»»fc-J-6«#BK/*»«Eai* 

[0 0 0 1 ] 
[0 0 0 2] 

W*«^*BIS6E*«-tt*33iJLT, (a) *(Iffl#^jEa^ 
4T 5 *»*r »B b T T ^ -fe ^ ft B6 Cffi #BSESW 

k, (wnuRi^afB j5SfTft*>n-ci/^5iHij»±<oafBrt* 

fc^)o (a)c7)BEEaW{-^V^T{±, CCITT-CttW* 

?dffi#-r-<r(c:f^— c^Bf-^siaftfflv^T, ^^y— 

b V — 9 aMHJffl#*BBE-*"Sia 5 i-^-T «t 5 ^*^/6 s ^ 
t^tit^ao HPfe, i <D I Dft I Di. *(75« 

Slff^ftSi i: L, Si mm^k^y b7 — ?(D&& 
|8*l^««FLTt^5 ^cOi:-r^ 0 fc L*iJffl# i h 

!7 — ^SrfUfflbfcv^i:#«rfi % £TlDi ft^^h!?" 

#ifci565o fijffl* i fiBS^HSrfflv^T, »*W«S 
i ft^St^r Lt r u SrBtf#{bL, *y hy — ^Kig 
-to M7-^^g5>"C««PLTV^*iJ^# i 

co««tt#ft^^mur[w]i:< cnft««?ii^ Ur u 
ftpf^bL, ^.coft^^ i ^b^oTt^fttt— ife-rttji 

ft^^T, ht7-^Ppir*ff3[lIcoam^^ 

^rawxsrflF-fi-ffcu w#iw-r?a«Srii*&-rs« 

[0 0 0 3 ] 

±5^, dix*"CH:*y M7-^**Uffl*«rBBE-r*« 

{CIE L v * k v ^ 5 BBfc-e is J* &WlVr & tiX^lt X 
5 0 L^LftdSb^— y-^/uaff t-tei^Tte, «<'h* 
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«t f9*Uffl#^«*««* s «a^Sffi:l!fttt^*1tt (E. Bih 
am and A. Shamir : "Different ial cryptoanalysis of D 
ES-1 ike cryptosystems", ' 90 EUR0CRYPT0, August 199 

Jtrv^SOA»*iESll^*Eai-SiKK* s *)So 

[0004] **w<obwwc. JiSfiLfcfie*s#<z>ra« 
K> St y> <d ft 1) * r *3 c: & 3 r a* r # £ ft *Bffi/ «l-*Hi 

[0 0 0 5] 

^«tf?a*stt5o &p^> lift 

s;Srftm-t-sas«^^*.fonrv^ttiaT"e, #*U/h# 
^-tn-?n*jffl#* (id) dswarfeix, 

btiZ i D^#RSLfc»««*^y by-^l-J; Of? 
fiasttr*ijffl#ic»*^ia#*ix, ^M^h^^ 

««Sttrv^»-&l-*3V^r, tftBE#^feBEW#Jnii&S 
Bf#fk5nfca**EW#*-r«*Lfct©fcBf*«ii: 
Ltffii^, !*IE#^fcaifeixr#fcBliEffloaifcSrIiEW 

=f y x ^ ^ *t-r * jitR¥^c5fe* * t -r 5 te 
[0006] *»w<ofg2(o#»t4, ifs^y hy — ^ 
»jt^*6turv^^«RTr, #*yffl#^*ft«x#J 

(ID) as#J Sr&n* *yM7-^fti:^5IS 
tbSiHWM;:, LtfflPt?n5 I Di: 

#^®*l-BE^^n, Ski-** h y — JKDy*—?^— 



3) ffl¥5-3 4 4 1 1 7 

^rt^C4x?3^*iJffl#^ I Di:|B**«36S«»*nrv^ 
S»^l-*3V^r, *K#*iEW#feBliE-*-afc*^»* 
LKWtlcSSaft* «t tfBEflt^ i #r«£ Lfc&* 

rfe6 0 

[0 0 0 7] *3£i^<7>!S3(7>#mte> »«** 

(id) aMHSrfcix* *yH7-^rti:&BI* 

tlStH^ ^ii$SB|f7§~GD$t <^ LTH^tl/^) I DiC 

ttttbfcS******* hy-^ie J: BftoftSftrfUfl! 

t-Ett£ ft, £ fells' h!7-^<?)f-^^ 
^rt^mb^fijffl*^ i D£««**a^SMff£ftrv> 
s»^«-fcv^r, ta^e^SrBSEi-sfc*^-^ 

i»36S«^SrBK+*fc«)^-#*raWI-a*- 
fcKJ:*), *ijffl**s*-f (ID) **vYy 

[0008] #*w<z>*4ow*tt, iift^y vy — z 

«itds#x.&nrv^ttSTr > #*ijffl#^*n-€tt*J 
(id) ^ttsrfeix, ^^hy-^rti^i^ 

^ii^pt-^-cD^i: LTfflV^tiS I 
W-|»Lfc««*«36S*y hy-^i-ct GffraSfrrfiJJfl 
#|r»«^E^*tL. Sfe^^s/ M7-^(7)f-^^- 

9, *ljffl#365*-f S»^*«fr (ID) ^^7h!7-^l^ 

fB Srfrft5 «9 . Blw^Tfc «tU«li»*ii« ^fc 

*oiif^»<DE{f*^TSitStB^BK/Bt-^«iE3l* 

strfcSo 

[0 0 0 9 ] 

^ [^JS^J 1 ] J^Ti-H l RtfBI 2 Srffiv^r*«W^» l 
IDi S:^y H7-^l^to y h!7 — ^ lifljffl 

v>r^^ b y — ?\±, i ^^ftj i Di i 

Di -E s i ( ) y^H^&Esi () ^r^^LBf-^ 

*3^bfUffi# i com&msi ^«tor«f#ft*nfcw 

j]E s i (r c ) £{fi$U r u ^Esi ( r c ) * i 
i^5 0 rc^i: #S^itS i ^ot^Si^W, E 
5^ si (r c ) ^^^SfitE^si ( ) £ffil^T, 
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5 

ttT^IJffl# i ii, h!7 — *Bf£fl!<E>SL*r n £r£L^C 

OiPW^Esi () tr»»6tf*tl, ^ft&JB 

si (r u ) SrffrftU S <bl-#il«r c l:J;otEs 
i (r u ) *"&**7"CBt#^b"CE r c (Est (r 
U ))S:MU r n i:Er c (E s i (r u b 

y-^ic^^M-To hy-^te£#-e 

HEr c (Esi (r u ))«:«"3*U -^fit^ i ^ 
2SoT*fcttfc— ft-Tfttf i *iE3fc*iJffl#i L TIB HE 

EsiO, Er c ( ^<fc^ i 

^6a6foiX-C#fcE r c (Esi (r u ))**-§■# 8, 
9tIfL r u *3> h!7-^«tf:r u t it 

tt«l 0-eJt*ftLrP5#iS— ft-Ttttf i Sr3E3fc*U/H* 

#W;jEMS&Si ^oti/>^v^^^, 

(m) i^aOiK-t-o ittSL**£»5 4: 

Pf#*l 2 fcfflV^ i LTV^ r n *3±t5Si 

A^bEsi (r„) £fH*U ^7)ft^^hy-^^ 

(r„) «^Lr n rnasfijffl#as%£Lfct> 
ofc— &-Tixfi*y h? — *4tjE3 i: LtBEtS. fc 

d*#K fcStfttT?, 1P*>* y b 17 — ^^<£> I D^I/T* 
^feTft4IU^iifS^ J ^ , 9 t 9 £fT&5<£>^~C% (l) * 

y hv-*\z£zmm#<onm* (2) *uffl#^±**y 
h!7- ?<nmu, (3) +y M7— ^d*e>fijffl#^^*a 

[0 0 10] £ feK»{fflg»*4>fc< U t£*^<^ 
h y — ^ — I D^M^^-a^Tf+S [Hi co iiff co 

obbe, (2) mmm\z. &z>*y v v-?<Dmm, o) * 

[001 1 ] 
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6 

ilDi 4:SL»»^*2 0-e*^SnfcBBEffl<©a*r 

fiEfflcoSL*r u ^5/ hl7 — ^ i i^iifSlc 

fflv*S#iI*r c ta*JS4»2 2lJiJ;9*ftt8. * 
yH7^ll, »E«#*!«B8»» 2 3^<fc5BB*F 
( ) *5«fctffUffl# i ^W»Si i^ctS*ii«l«#B8* 
E s i ( ) SrJBVvf *-!§•» 2 4"CE si (F (r c , r 
n ))SrtH*U r u tK si (F(r c , r n ) ) £ i 

70 *»2 5^*3lt***H*-e*>SE" ,1 Si () fcWEflf 
SMSi«2 6WiSF( ) ffiHWcF"^ ) 
l^T, E^si (Esi (F (r c . r n )» *tHf 
L> (r c , r n ) rc SrPt#ftiifSffl^*ii« 

u tttftft&nfcru a**M8*2 7 T*<DJttfc3^*tf § -- 
i^rt-;i^f;£*s> M7 — *S:jE3 t UtBEta, t> ~ 

i^iJffl#oiEa>fcSi $rSotl>?S^Ii:^f)IWf(l 
20 <S 0 fcftlU *>«««Si ^ct5«#H»S:» 

6 D lot, E _1 si () SrftlbttV^flbAt-tt, Esi 
(r CJ r n ) H*ft^iwa»l-b^ftx.4V\ 
[0 0 1 2] StV^-C*lJffl# i fIJffl#^«*«Si ^ 
J:oTr u SrBS-^S2 9 i^J: Outfit E s 
i (r u ) Sr^L, Esi (r u ) YV — ^\Z. 

l^r u fc i ^«*««Si ^C>llff#*2 8tEsi 
(r u ) ^rf+^L. ^co{[i:<h i ^foiSoT&fctti:*J* 

LTlSfiEi-So fe ; 5V^^^, i *»ibiSb*b-C#fcE s i 
(r u ) ^ *Jffl* i ©S*«Si l^iSatBft-C*) 
SE^sj () ?rfflV^r, E'^i (Esi (r u )>* 

-tti^, *v VV — 2^<r> I DO^^r^^Tti-3tHlcD 
iiff ^^"9 fc 19 ^rfi 1 ^ 5 co^r% (l) ^^f^-^ia 

^ s*Uffl#^B!E, (2) fijffltiaa^-y h!7— 

SE, (3) h V — ^^5j3pJffl#^<Z>*a*i«>EW ^>3 

[0013] **5, *Wlt?fflv^fcBB«F( ) r gg 

ruflSfeF ( ) co^frj 

^{+1 x, y*Sft^Ufci:#, z=F (x, y) 
fctz tt— #}C*^^tt^^^o 

^{^2 za*8fc5&Lfci:#, z=F (x, y) SriMfc-f 
x, y (i-f(-M^n^) ' 
50 *fl=3 $)5x^X.b^ 7^^A4r WW^ft 
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irbfcWN Esi (F(r, x))tf>ffi^Mtt£ 2il*MM 
L ^ ^IJ (7) if CD — 33 £r ^ o X t @ <£> ' * * — ^ t ft £ *t 

[0014] 

[n i ] -fcmm<Dm i ^iw^^t^° s> ^> la-cfc 

<5 o 

[|2] **W<©SBloftf^«:*-t"7n— ^^r- h"t?*> 
[1213] %Lftm<nft2<Dmfcm*7F-t~?* s> *B"CS> 
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